Hi Ray: thanks for the quick response. If I make your suggested change, the code becomes:

       try {
           loginConfigStr = loginConfig.getURL().toString();
       } catch (IOException e) {
           if (log.isDebugEnabled()) {
               log.debug("Could not resolve loginConfig [" + loginConfig
                   + "] as a File, using URL");
           }

           loginConfigStr = loginConfig.getURL().toString();
       }


Which does work ok in MevenIDE and also from the command line. I think this can be reduced to the single-line:

           loginConfigStr = loginConfig.getURL().toString();

but there may be more subtle security issues at play here than I am aware of, (i.e. going to the filesystem first) hence my kludgey fix.

Simon.


----- Original Message ----- From: "Ray Krueger" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Wednesday, August 03, 2005 2:56 PM
Subject: Re: [Acegisecurity-developer] JaasAuthenticationProvider


loginConfig is a Spring Resource instance.
Try using loginConfig.getUrl() instead and let me know how that works for you.
-Ray

On 8/3/05, Simon Tuffs <[EMAIL PROTECTED]> wrote:

Hi:

I built Acegi under MevenIde/Eclipse, and ran into a problem with the test cases for the Jaas security provider. I debugged it and determined that the
cause of the test failure was that MevenIde runs JUnit without forking,
which leaves properties in the java.security.Security properties, resulting in a URL which (on Windows) started with "C:/", Java not like this one bit.

The fix was simple, and here is an Eclipse patch for it: convert the
loginConfig.getFile() to a URL. I'm not sure this is the correct fix, but
it lets me get moving.

Regards,

Simon.

Index: JaasAuthenticationProvider.java
===================================================================
RCS file:
/cvsroot/acegisecurity/acegisecurity/core/src/main/java/net/sf/acegisecurity/providers/jaas/JaasAuthenticationProvider.java,v
retrieving revision 1.10
diff -u -r1.10 JaasAuthenticationProvider.java
--- JaasAuthenticationProvider.java 17 Apr 2005 14:13:13 -0000 1.10
+++ JaasAuthenticationProvider.java 3 Aug 2005 21:43:16 -0000
@@ -284,7 +284,7 @@
         String loginConfigStr = null;

         try {
-            loginConfigStr = loginConfig.getFile().toString();
+            loginConfigStr = loginConfig.getFile().toURL().toString();
         } catch (IOException e) {
             if (log.isDebugEnabled()) {
log.debug("Could not resolve loginConfig [" + loginConfig





-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer




-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer

Reply via email to